REJECT -> MS-CHAP-Error \001E=691 R=1 ... Windows strangeness?

2003-03-12 Thread Wouter de Jong
Hello,

Dunno if this is the right place to ask this question, but yet I have to start 
somewhere since I can't find anything with the common searchengines :(

I'm trying to setup FreeRadius as a Radius-server for FreeBSD userland PPP+PoPToP+MPPE 
VPN-environment. (MS-CHAPv2)

Logging in works perfectly with radcheck:

++--+---+++
| id | UserName | Attribute | op | Value  |
++--+---+++
|  1 | clnt001  | User-Password | == | abc123 |


However, if there is NO MATCH, I get a Windows POP-up box that says:
'Windows was unable to connect to the network using the username and password you 
provided. Please re-enter the username and password.'

Without Radius, I get:
'Verifying username and password...

Error 691: Access was denied because the username and/or password was invalid on the 
domain.'

Is this because Radius sents 'MS-CHAP-Error = "\001E=691 R=1"' ?
If so, can I do anything about this to get back the behaviour like without 
Radious-auth?


> ppp.log:

With Radius:
Mar 12 15:49:15 vpn-1 ppp[20043]: LCP:  MAGICNUM 32667a7c 
Mar 12 15:49:15 vpn-1 ppp[20043]: LCP:  TEXT MSRASV5.10 
Mar 12 15:49:15 vpn-1 ppp[20043]: LCP: deflink: RecvIdent(4) state = Opened 
Mar 12 15:49:15 vpn-1 ppp[20043]: LCP:  MAGICNUM 32667a7c 
Mar 12 15:49:15 vpn-1 ppp[20043]: LCP:  TEXT MSRAS-1-DOEBE 
Mar 12 15:49:15 vpn-1 ppp[20043]: Phase: Chap Input: RESPONSE (49 bytes from johndoe) 
Mar 12 15:49:15 vpn-1 ppp[20043]: Phase: Chap Output: FAILURE


Without Radius:
Mar 12 15:51:52 vpn-1 ppp[20088]: LCP:  MAGICNUM 03eb43e9 
Mar 12 15:51:52 vpn-1 ppp[20088]: LCP:  TEXT MSRASV5.10 
Mar 12 15:51:52 vpn-1 ppp[20088]: LCP: deflink: RecvIdent(4) state = Opened 
Mar 12 15:51:52 vpn-1 ppp[20088]: LCP:  MAGICNUM 03eb43e9 
Mar 12 15:51:52 vpn-1 ppp[20088]: LCP:  TEXT MSRAS-1-DOEBE 
Mar 12 15:51:52 vpn-1 ppp[20088]: Phase: Chap Input: RESPONSE (49 bytes from johndoe) 
Mar 12 15:51:52 vpn-1 ppp[20088]: Phase: Radius: Request sent 
Mar 12 15:51:54 vpn-1 ppp[20088]: Phase: Radius(auth): REJECT received 
Mar 12 15:51:54 vpn-1 ppp[20088]: Phase:  MS-CHAP-Error "01E=691" 
Mar 12 15:51:54 vpn-1 ppp[20088]: Phase:  MS-CHAP-Error "E=691 R=1" 
Mar 12 15:51:54 vpn-1 ppp[20088]: Phase: Chap Output: FAILURE 


Thanks in advance for ANY answer :)

--
MadDog2K
http://www.maddog2k.nl
"the great puppy dog"

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: CHAP Error

2002-10-24 Thread Gene Parks
had the same problem.

right below pap put the following

chap {
Auth-type = CHAP
}

That will fix it

-Original Message-
From: Tim McCracken [mailto:tim.mccracken@;primeragroup.net] 
Sent: Friday, October 25, 2002 12:16 AM
To: [EMAIL PROTECTED]
Subject: CHAP Error



I have PAP and MSCHAP working fine using MySQL for users. When I try to
enable CHAP I get the following error at startup:

ERROR: Cannot find a configuration entry for module "chap".

I added chap to the Authorize section - which is what I think causes the
error. I uncommented chap in the Authicate section.


Where is the configuration entry that it is looking for?

Tim


- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



CHAP Error

2002-10-24 Thread Tim McCracken

I have PAP and MSCHAP working fine using MySQL for users. When I try to
enable CHAP
I get the following error at startup:

ERROR: Cannot find a configuration entry for module "chap".

I added chap to the Authorize section - which is what I think causes the
error.
I uncommented chap in the Authicate section.


Where is the configuration entry that it is looking for?

Tim


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html